26 matches found
CVE-2019-7351
Log Injection exists in ZoneMinder through 1.32.3, as an attacker can entice the victim to visit a specially crafted link, which in turn will inject a custom Log message provided by the attacker in the 'log' view page, as demonstrated by the message=User%20'admin'%20Logged%20in value...
CVE-2019-7351
CVE-2019-7351 affects ZoneMinder up to version 1.32.3. A crafted link can trigger log injection in the web interface by injecting a custom log message through the attacker-controlled input (e.g., log view page and a value like message=User 'admin' Logged in). The vulnerability description does no...
CVE-2017-7351
REDCap 7.x is vulnerable to SQL injection in the file upload handler (SendITController:upload) prior to 7.0.11. The issue is triggered by a trailing substring in the upload endpoint, enabling an attacker to inject SQL through the file upload process. Impact: potential unauthorized database access...
CVE-2016-7351
CVE-2016-7351 is rejected/not used per the Initial Description.
CVE-2014-7351
The CVE-2014-7351 entry concerns the Global Movie Magazine Android app (com.magzter.globalmoviemagazine) version 3.0, where the app does not verify X.509 certificates when connecting to SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a cr...